Note: Google Test filter = HeapUnitTest.CFXGCPlatform_* [==========] Running 2 tests from 1 test suite. [----------] Global test environment set-up. [----------] 2 tests from HeapUnitTest [ RUN ] HeapUnitTest.CFXGCPlatform_ForegroundRunnerOverrideMismatch [ OK ] HeapUnitTest.CFXGCPlatform_ForegroundRunnerOverrideMismatch (0 ms) [ RUN ] HeapUnitTest.CFXGCPlatform_SweeperNeverFinalizesDeadTimerOwners ================================================================= ==2133==ERROR: AddressSanitizer: use-after-poison on address 0x7b5402000850 at pc 0x563f59c6c180 bp 0x7ffc2e990a10 sp 0x7ffc2e990a08 READ of size 8 at 0x7b5402000850 thread T0 #0 0x563f59c6c17f in CFX_Timer::TimerProc(int) third_party/pdfium/core/fxcrt/cfx_timer.cpp:58:34 #1 0x563f5a20d1b3 in HeapUnitTest_CFXGCPlatform_SweeperNeverFinalizesDeadTimerOwners_Test::TestBody() third_party/pdfium/fxjs/gc/heap_unittest.cpp:222:7 #2 0x563f60f5173b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x563f60f543e7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x563f60f56353 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x563f60f85fba in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x563f60f84a1e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x563f599088d9 in main third_party/googletest/src/googletest/include/gtest/gtest.h:2337:73 #8 0x7f6a88437249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Address 0x7b5402000850 is a wild pointer inside of access range of size 0x000000000008. SUMMARY: AddressSanitizer: use-after-poison third_party/pdfium/core/fxcrt/cfx_timer.cpp:58:34 in CFX_Timer::TimerProc(int) Shadow bytes around the buggy address: 0x7b5402000580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7b5402000600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7b5402000680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7b5402000700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7b5402000780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x7b5402000800: 00 00 00 00 00 00 00 00 00 00[f7]f7 f7 f7 f7 f7 0x7b5402000880: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x7b5402000900: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x7b5402000980: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x7b5402000a00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x7b5402000a80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb Memory was manually poisoned by thread T0: #0 0x563f598d0942 in __asan_poison_memory_region (/chromium/chromium/src/out/asan/pdfium_unittests+0x2585942) (BuildId: 4d9b26efa2159452) #1 0x563f5e12bed7 in cppgc::internal::HeapVisitor::Traverse(cppgc::internal::BasePage&) v8/src/heap/cppgc/object-poisoner.h:27:5 #2 0x563f5e174ad5 in cppgc::internal::Sweeper::SweeperImpl::Start(cppgc::internal::SweepingConfig) v8/src/heap/cppgc/heap-visitor.h:36:7 #3 0x563f5e14388a in cppgc::internal::Heap::FinalizeGarbageCollectionImpl(cppgc::EmbedderStackState) v8/src/heap/cppgc/heap.cc:222:12 #4 0x563f5e144484 in void heap::base::Stack::SetMarkerAndCallbackImpl(heap::base::Stack*, void*, void const*) v8/src/heap/cppgc/heap.cc:177:31 #5 0x563f5e1916f2 in PushAllRegistersAndIterateStack push_registers_asm.cc #6 0x563f5e141e2c in cppgc::internal::Heap::CollectGarbage(cppgc::internal::GCConfig) v8/src/heap/base/stack.h:78:7 #7 0x563f5e135cec in cppgc::internal::GCInvoker::GCInvokerImpl::GCTask::Run() v8/src/heap/cppgc/gc-invoker.cc:67:19 #8 0x563f62168de3 in v8::platform::DefaultPlatform::PumpMessageLoop(v8::Isolate*, v8::platform::MessageLoopBehavior) v8/src/libplatform/default-platform.cc:173:9 #9 0x563f5a483d1c in V8TestEnvironment::PumpPlatformMessageLoop(v8::Isolate*) third_party/pdfium/testing/v8_test_environment.cpp:55:10 #10 0x563f5a20cc42 in HeapUnitTest_CFXGCPlatform_SweeperNeverFinalizesDeadTimerOwners_Test::TestBody() third_party/pdfium/fxjs/gc/heap_unittest.cpp:280:5 #11 0x563f60f5173b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #12 0x563f60f543e7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #13 0x563f60f56353 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 ==2133==ABORTING